News for hackers. Stuff that matters.

A comment on DNS-over-HTTPS. Parent comment

Re:DNS-over-HTTPS by eggnet on Friday September 30, 2016 @12:02AM (#12610464)
http and rest are not the only ways to reuse a socket. You could just write the packet to the TLS stream, raw, and keep the socket open.
[ Parent | on HN ]
Re:DNS-over-HTTPS by LukeShu on Friday September 30, 2016 @12:16AM (#12610491)
Definitely. But then you need to define an envelope to mark where an individual message begins and ends (with UDP DNS, it's a single datagram; with TCP DNS, it's the entirety of the transmission). There are infinite ways to do this, and countless many already specified in various standards (many of which are already implemented in browsers, which is surely the the primary application Google had in mind). HTTP provides one such envelope.
[ Parent | on HN ]
Re:DNS-over-HTTPS by pprx on Friday September 30, 2016 @01:58AM (#12610728)
> with TCP DNS, it's the entirety of the transmission

DNS Messages have a two-byte length prefix when transmitted over TCP. Multiple envelopes can and often are sent over a single circuit.

[ Parent | on HN ]